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DETAILED ACTION 

1 . Claims 1-91 are pending. 

Claim Objections 

2. Claim 51 is objected to because of the following informalities: 

The phrase "the system of claim 483" should be "the system of claim 48". 
Appropriate correction is required. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 1, 46 and 91 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. 

On line 2, page 18; line 12, page 23 and line 7 page 29, the phrase 
"authenticating the identity" lacks antecedent basis. 
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Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
states. 

6. Claims 1-18, 21-29, 32-35, 37-38, 40-42, 44, 46-63, 66-74, 77-80, 82-83, 85-87, 

89 and 91 are rejected under 35 U.S.C. 102(b) as being anticipated by Piosenka et al., 
US Patent 4,993,068. 

a) As to claims 1, 46 and 91, Piosenka discloses a personal identification 
system for identifying users at remote access control sites comprising the steps of 
enrolling at least one credential for the user with the authority (Fig.1 , col. 4, lines 2-21 ); 
establishing at least one shared secret between the user and the authority relating to a 
predefined shared secret manner for presenting a current user credential to the 
authority (col. 9, lines 22-25); receiving at least one currently presented user credential 
by the authority for authentication of the identity of the user (col. 8, lines 33-35) and 
authenticating the identity of the user by the authority based on a correspondence 
between the enrolled and current user credentials (col. 8, lines 50-58) and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
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authority (col. 5, lines 6-19). Piosenka discloses the shared secret manner allowing the 
authentication process to be performed with higher accuracy and secuhty, for example, 
at a point of sales terminal, facial feature biometric and financial attribute data are 
required, however at the guard station of a military base, perhaps both facial information 
and the fingerprint biometric are needed (col. 9, lines 50-64). 

b) As to claims 2-3 and 47-48, Piosenka discloses the method wherein 
enrolling the user credential further comprises receiving and storing the user credential 
by the authority (Figure 1 , element 40). 

c) As to claims 4-6 and 49-51, Piosenka discloses the method wherein 
storing the user credential further comprises storing at least one biometric template for 
the user (Fig. 1, element 13); storing a document for the user (Fig. 1, element 10); 
storing the user credential on one of a host computer, a local terminal, and a smart card 
for the user (col. 6, lines 40-54). 

d) As to claims 7-11 and 52-56, Piosenka discloses the method wherein 
enrolling the user credential further comprises enrolling at least one biometric template 
for at least one of a fingerprint, a face, a voice and an iris template (Fig. 1 , elements 1 1 - 
15) and at least one document further comprises at least one of a digital document 
comprising at least one of a digital certificate and a digital signature and a paper 
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document comprises a passport for the user (Fig. 1, element 10; col. 1, lines 56-58; col. 
5, lines 32-50; col. 7, lines 12-17). 

e) As to claims 12-13 and 57-58, Piosenka discloses the method wherein 
enrolling the user credential with the authority further comprises storing user 
authentication information on a user token, on a smart card (col. 6, lines 40-47). 

f) As to claims 14-15 and 59-60, Piosenka discloses the method wherein 
storing the information on the smart card further comprises storing biometric information 
having one of a fingerprint, a face, a voice and an iris for the user (Fig. 1 , elements 1 1 - 
14, 40). 

g) As to claims 16 and 61, Piosenka discloses the method wherein storing 
the information on the smart card further comprises storing the shared secret for the 
user (col. 9, lines 22-25). 

h) As to claims 17 and 62, Piosenka discloses the method wherein storing 
the information on the smart card further comprises storing the authentication 
information on the smart card signed with a private key for the user (col. 5, lines 52-64). 



Application/Control Number: 09/769,844 Page 6 

Art Unit: 2137 

i) As to claims 18 and 63, Piosenka discloses the method wherein enrolling 
the user credential further comprises enrolling at least one additional credential for the 
user with the authority (col. 5, lines 34-37). 

j) As to claims 21 and 66, Piosenka discloses the method wherein 
establishing the shared secret further comprises storing information about the shared 
secret by the authority (col. 9, lines 22-27). 

k) As to claims 22-23 and 67-68, Piosenka discloses the method wherein 
storing the information about the shared secret further comprises storing the information 
about the encrypted and digitally signed shared secret and the user credential together 
in a database by the authority (col. 6, lines 32-54). 

I) As to claims 24-26 and 69-71, Piosenka discloses the method wherein 
establishing the shared secret further comprising establishing at least one additional 
shared secret comprising a predefined shared secret personal identification number 
between the user and the authority; establishing at least one additional predefined 
shared secret manner of presenting the current user credential to the authority (col. 9, 
lines 22-31). 

m) As to claims 27-29 and 72-74, Piosenka discloses the method wherein 
establishing the additional shared secret further comprises establishing a predefined 
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shared secret manner of presenting at least one additional current user credential to the 
authority (col. 9, lines 50-64); of presenting each of a plurality of additional current user 
credentials comprising establishing a variation of the predefined shared secret manner 
of presenting each of the additional current user credentials to the authority for the user 
corresponding to a variation in a degree of security (col. 9, lines 1-21). 

n) As to claims 32-33 and 77-78, Piosenka discloses the method wherein 
receiving the currently presented user credential further comprises receiving a current 
biometric sample having one of a fingerprint, a face, a voice and an iris for the user by 
the authority (Fig. 2, element 3; col. 8, lines 10-12, 33-47). 

o) As to claims 34-35 and 79-80, Piosenka discloses the method wherein 
receiving the currently presented user credential further comprises receiving the current 
user credential in a shared secret manner directed by the authority (col. 9, lines 22-25); 
further comprising the user to present a biometric sample for at least one user 
fingerprint (Fig. 2, element 33) or to present a combination of biometric samples for at 
least two of a user fingerprint, a user face, a user voice and a user iris (col. 8, lines 33- 
47). 

p) As to claims 37-38 and 82-83, Piosenka discloses the method wherein 
receiving the current user credential further comprises receiving at least one additional 
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currently presented user credential by the authority and in a manner directed by the 
authority (col. 9, lines 50-64). 

q) As to claims 40-41 and 85-86, Piosenka discloses the method wherein 
authenticating the identity of the user by the authority further comprises authenticating 
the identity of the user by one of a host computer and a local device (Fig. 2, elements 4 
and 35) and authenticating the identity of the user for activation one of a gate controller, 
a door opener, a telephone and an appliance (col. 8, lines 6-9). 

r) As to claims 42, 44, 87 and 89, Piosenka discloses the method wherein 
authenticating the identity of the user by the authority further comprises authenticating 
the identity of the user based on the enrolled user credential and the shared secret 
manner for presenting the current user credential stored together in one of a local 
database and a remote database of the authority (col. 9, lines 50-64; col. 6, lines 40- 
54). 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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8. Claims 19-20, 31, 36, 39, 43, 45, 64-65, 76, 81, 84, 88 and 90 are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Piosenka et al., US Patent, in view 
of Kanevsky et al., US Patent 6,421 ,453. 

a) As to claims 19-20 and 64-65, Piosenka discloses predefined shared 
secret nnanner, he does not disclose the predefined shared secret sequence of 
presenting the current user credential to the authority. 

Kanevsky et al. discloses the methods and apparatus for user recognition 
(classification/identification/verification) to grant access or service to authorized users 
especially to nnethods and apparatus for providing same employing gesture and 
speaker recognition by pre-storing a predefined sequence of intentional gestures 
performed by the individual during an enrollment session; extracting the predefined 
sequence of intentional gestures from the individual during a recognition sessions and 
comparing the pre-stored sequence to the extracted sequence to recognize the 
individual; the predefined shared secret sequence which functions in a manner 
analogous to a personal identification number for the user (col. 3, lines 27-37) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of predefined shared secret sequence in the system of 
Piosenka, as Kanevsky teaches, so as to improve the accuracy and security in 
authenticating users. 
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b) As to claims 31, 36, 39, 76, 81 and 84, Piosenka discloses the authority 
receiving the current user credential; directing the user to present a combination of 
biometric samples. He does not disclose obtaining those steps in a predefined shared 
secret sequence. 

Kanevsky discloses predefined sequence concept to classify/identify/verify users 
for granting access or services (Fig.1 ; Fig. 5). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of predefined shared secret sequence in the system of 
Piosenka, as Kanevsky teaches, so as to improve the accuracy and security in 
authenticating users. 

c) As to claims 43, 45, 88 and 90, Piosenka discloses the method wherein 
authenticating the identity of the user in order for access to one of a device which 
activating a silent alarm, a physical location, he does not disclose accessing to a 
network. 

Kanevsky discloses a method for controlling access of an individual to one of a 
computer and service and a facility (Abstract). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of authenticating users for accessing network in the system 
of Piosenka, as Kanevsky teaches, so as to provide more services to users. 
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Allowable Subject Matter 

9. Claims 30 and 75 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 

The prior arts of Piosenka and Kanevsky do not disclose the claimed method 
comprising establishing a variation of the predefined shared secret manner of 
presenting each of the additional current user to the authority for the user for 
consecutive occasions. 

Conclusion 

10. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure 

a) US Patent 6,185,316 to Buffam discloses self-authentication apparatus 
and method. 

b) US Patent 6,655,585 to Shinn discloses system and method of biometric 
smart card user authentication. 

c) US Patent 6,189,096 to Haverty discloses user authentication using a 
virtual private key. 

d) US Patent 5,838,812 to Pare, Jr. et al. discloses tokenless biometric 
transaction authorization system. 
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e) US Patent 6,269,348 to Pare, Jr. et al. discloses tokenless biometric 
electronic debt and credit transactions. 

1 1 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh DIeu Nguyen whose telephone number is 703-305- 
9727. The examiner can normally be reached on M-F 6:00-2:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on 703-306-3036. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 

Minh Dieu Nguyen 
Examiner 
Art Unit 21 37 
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